Data Retention Policy
Draft retention rules for account data, logs, backups, and deletion requests. Final retention periods must be approved before paid launch.
Active tenant data
Product, stock, quotation, customer, user, and settings data remains available while the tenant account is active and subscription access is permitted.
Audit logs
Tenant audit logs currently have configurable retention, with a default retention window used for operational traceability and security review.
Backups
SQLite backups are verified and retained according to the configured backup script policy. Off-host backup restore must be tested before relying on the system for public paid customers.
Cancellation
A cancelled tenant should be suspended first, then exported or deleted according to the final cancellation and data deletion workflow.
Deletion requests
Deletion may not immediately remove data from existing backups or audit records. The production policy must define when backup copies expire and what records must be retained.
Incident records
Security, restore, and support records may be retained when needed to investigate incidents, preserve auditability, or comply with legal obligations.